#App Security

1 article

Share banner headed AZURE - SECURING A MOBILE APP and "The secret in your APK", with the line "If the phone can read it, so can the person holding the phone." On the right, msdevbuild-eats-release.apk, the same file the store hands to every device, is renamed to .zip and unzipped into res/values/strings.xml, and a few lines below the app name sits a red box reading AZURE_OPENAI_KEY = 8f3c...9c21, in the clear, in nine seconds, no exploit involved.

Azure 5 min

The Secret in Your APK: Why Obfuscation Will Not Save It

An APK or IPA is a zip file. Anything hardcoded inside it, including your API key, is already public — and here is how to get it off the phone for good.

September 26, 2026 · Part 1

New technical articles, Azure AI and GitHub Copilot updates, and upcoming events. No spam, unsubscribe anytime.

The Secret in Your APK: Why Obfuscation Will Not Save It

Get new posts by email